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1 

Method of and apparatus for manipulating digital data works 
Field of the invention 

5 

This invention relates to a method of and apparatus for manipulating digital data works, 
particularly to provide, or embed within, such digital data works, data descriptive of the 
work, for example, the source of the work, its ownership and its availability for legal 
reproduction without infringement of copyright. 

10 

Description Q f ftg Priqr An 

Systems based upon digital data are becoming universal and indispensable; digital data 
15 passing between computers; digital telecommunications; digital audio; digital cameras; 
and the convergence of many of these individual components into multi-media, are a 
selection of the technologies to which this invention relates. The data structures or 
formats that are used in these different technologies are well documented and will not 
be described in this specification. It will however be appreciated by the skilled 
20 implementer that sophisticated encoding and compression algorithms are commonly 
used in digital recording and transmission and that these techniques may involve the 
manipulation of raw digital data in order for that data to carry further information. 
However, the further information introduced in such known techniques provides data 
needed to understand or handle, for example, bytes of the raw data properly. 

25 

The present invention is not directed to manipulating small units of digital data to enable 
that data to carry information inherent to the proper comprehension of the digital data 
itself but instead to hiding within a digital data work information that is specifically 
descriptive of that particular digital data work. The term digital data work defines any 
30 sequence of digital data capable of constituting a work in which copyright might subsist 
or the unauthorised reproduction of which might constitute infringement of any 
copyright subsisting in the work or a larger work of which the work itself forms a pan. 
Hence, for example, the digital data defining the output from scanning a 35mm colour 
transparency would be a digital data work. 

35 

There is a pressing need to enable the ownership of a digital data work to be readily 
apparent from the work itself. This would allow the owner of the copyright in the work 
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to prove more readily its ownership and thereby prevent further unlawful reproduction 
or negotiate a licence fee for use of the work. Also, it would enable a publisher of 
digital data works, for example a company that compiles multi-media CD-ROMS, to 
ensure that it is not unwittingly infringing copyright. Conventionally, this requires 
5 laborious and meticulous manual recording of the provenance of third party digital data 
works that are to be used. This is time consuming, expensive and not wholly reliable. 



As a more specific example, consider a professional photographer who uses a digital 
camera to take a digital photograph. He may wish to place the data file which 

10 constitutes the digital data work (the digitised photograph) with a photograph library. 
When the photograph is subsequently used, the photographer will be paid a copyright 
licence fee. However, the ease with which the data file can be duplicated without any 
loss of information means that the further use of the image can be impossible to control. 
In practice, there is a high probability that the image could be published again without 

15 the photographer being alerted to the fact; the photographer then losses out on licence 
fees. The ease with which digital images can be cropped and modified compounds the 
problem. 



Currently, it is possible to include a simple identifier in the header of the data file of a 
20 digital data work. The header could typically comprise a simple copyright notice. 
However, it is very easy to strip out this information, making this approach unreliable. 
Further, translating a file into a different format also results in this information being 
lost. 



25 Reference may also be made to Komatsu et al "A proposal on digital watermark in 
document image communication and its application to realising a signature": Electronics 
and Communications in Japan vol. 73, no.5, 31 May 1990 New York pages 22-33, 
XP 000159282. That paper discloses a technique for modifying images in such a way 
that the modified image carries hidden information. However, the modification is 

30 corrupted if the image is manipulated: like a conventional watermark, it is designed to 
be corrupted or absent if the image is corrupted. Hence, it is of little practical benefit 
since unauthorised users of images can readily destroy the coded information by 
performing quite ordinary image manipulations, such as cropping and small rotations 
(e.g. rotations of plus or minus 1 degree needed in order to accurately set the horizon in 

35 an image). 
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3 

Reference may also be made to EP 0551016 to Canon KK, which discloses a system 
for manipulating the position of dots forming a photocopy. The relative positions of the 
dots code for particular information. There is no modification however of a digital data 
work as such. 

5 

The practical requirements for a working system capable of embedding copyright 
information into a digital work are demanding: 

1. the system must be reasonably rapid and not memory intensive; 
10 2. the modifications which code for the additional information must not be 

readily perceptible; 

3. the modifications must be sufficiently robust to withstand the manipulations 
ordinarily applied to those data woks (e.g. in the case of digital images, 
cropping and small rotations as described above); 
15 4. the modifications must not be readily detectable or removable by any 

unauthorised user, 

5. the modifications must be reliably detectable without reference to the original 
data work. 

20 These requirements are met by the present invention. 

SagmsnLgf the invention 

In accordance with the present invention, a method of manipulating a digital data work, 
25 made up of a number of data elements, to include additional data descriptive of that 

digital data work, comprises the steps of:- 

dividing the whole or pan of the work into a pattern of constituent pans, each 

constituent pan consisting of a set of data elements and each set of data elements having 

a measurable characteristic; 
30 selecting a particular constituent pan; 

modifying some or all of the set of data elements of that particular constituent 

pan according to a given set of rules such that the measurable characteristic of that set 

is different from the measurable characteristic of the corresponding unmodified set of 

data elements, or other sets in other constituent parts, 
35 wherein the difference is detectable, even after the work has undergone 

alterations which are of at least one kind of the alterations ordinarily applied to such 
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4 

works, if the pattern of the constituent pans and the nature of the measurable 
characteristic are known, but is not otherwise readily detectable; 

and wherein the modification codes for the additional data descriptive of that 
digital data work. 



Hence, the essence of the invention is to superimpose a selected pattern, generated by a 
given set of rules, on sets of data elements of the work thereby to modify the sets. The 
pattern may be a repeated pattern, although this is not essential. The invention can be 
10 conceptualised in terms of noise: all digital information has a noise element. This 
should be imperceptible. The present invention can be thought of as organising this 
noise into regular patterns. The patterns themselves can contain information. 

Where the work is an image, then the modification is, in one embodiment, 
15 superimposed on all pixels of the image, with the possible exception of those areas 
where such a pattern would be readily discernible to the ordinary viewer. The pattern or 
template may, for example, be the rows of the image and the modification may be the 
addition of +1 to every pixel in selected rows and the addition of - 1 to every pixel in 
other selected rows. This modification produces only a slight change in the values 
20 describing any given pixel; however, because the pattern is applied across much or 
indeed preferably all of the image, the total information imparted can be considerable. 
The presence of the pattern can be detected by anyone who knows what pattern to look 
for, that user can then quantitatively determine the aggregate of all the small imposed 
changes if the nature of the measurable characteristic is known; statistical methods then 
25 make it possible to assess which information is significant and which may be 
disregarded as lying within the bounds of normal variation. 

In the example above of +1 or -1 being added to pixel values, the difference between 
the mean value of the set of pixels which were increased by one and the mean value of 
30 the set whose values were decreased by one would be greater than a value which could 
be calculated as the maximum attainable from an image whose elements had not been 
modified in the specified manner, hence the modified image can be thought of as having 
been marked. Anyone who duplicates the modified image will generate an image that is 
marked in this way; hence, the provenance of the duplicate can be established. 

35 

The mere presence of data elements modified in this way may constitute the additional 
data; i.e. there is no textual information per sc hidden within the digital data work. 
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Instead, the presence of manipulated sets of data elements acts as an indicator that the 
work is, for example, a copyright work which cannot be reproduced without specific 
permission from the right holder. This can be likened to giving the digital data work a 
•fingerprint'. 

5 

Further, in another preferred embodiment, the step of modification incorporates 
additional data into the work which is more explicitly descriptive of the digital data 
work. 

10 Typically, a copyright message or more detailed historical information broadly 
pertaining to the copyright in the digital data work (for example, date of creation, 
identity of creator etc.), can be hidden within the digital data work in a manner that is 
not readily detectable and therefore does not discernibly alter the digital data work. 
Being able to hide such data within a work clearly also has attractions to the non- 
15 commercial user as well; for example, many cameras today have the facility to imprint a 
date on an image. This has the disadvantage of defacing the image. With this 
embodiment of the present invention implemented into a digital camera, the 
photographer can hide not only date information but other data too (for example, the 
names of those photographed; the place of the photograph) into each digital image with 
20 no appreciable effect on the image itself. 

Hence, in such an embodiment, the actual data content of the manipulated sets of data 
elements may code for particular textual information pertaining to the copyright status 
of the work. In this way, a copyright related code number that would be hidden to 
25 persons, for example, viewing a digitised image, can be detected if one knows the 
particular pattern as defined above and the nature of the measurable characteristic. 

The pattern of constituent pans preferably does not form pan of a continuous sequence 
throughout the work. In many circumstances, it may be preferable to have a 

30 permutation algorithm to generate a pattern which distributes in a complex fashion, in 
either time or space, the constituent parts throughout the work. This may be particularly 
useful where there is a need, as there will be in most applications, to conceal the 
required pattern in order to prevent the system being cracked. Preferably also, the 
modification step itself is a function of the data content of the additional textual data to 

35 be included within the work. 
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In a preferred embodiment, a secret key is assigned to each user. An algorithm can be 
derived from that key to generate a permutation. That derivation can be achieved in a 
number of different ways which will be apparent to the ordinary, skilled cryptographer. 
The permutation can be applied to the binary number sequence representing a message 
5 to be hidden into the data work: this generates a permutated pattern which contains the 
message, the message being readable only to one who knows the nature of the 
permutation, i.e. the secret key. The permutated pattern is then imposed repeatedly over 
the entire original data work, i.e. all pixels. The use of carefully calculated 
permutations resolves two otherwise conflicting demands on the organisation of the 

10 "noise" in a data work into patterns. The first demand is the need for complexity to 
avoid easy removal and to avoid visible artefacts on images. However, the complexity 
cannot be too great since that might lead to prohibitively long detection times, especially 
where the work is an image and the image is cropped or rotated. In the present 
invention, those conflicting demands are resolved by the use of a simple underlying 

15 panem which is made substantially more complex by the use of carefully calculated 
permutations. These permutations both minimise the observable pattern effects and 
greatly simplify the search and detection process. Further, the number of permutations 
can be very large. For example, with a message only 10 bits long, the number of 
permutations is 10! (i.e. 3,268,800). Hence, there is little difficulty in providing users 

20 with unique keys. 

In another embodiment, two orthogonal permutations can be applied to code for two 
different messages. Typically, the first message can identify a photographic agency or 
library and be derived using a public key. The second message, identifying the 
25 copyright owner and details of the work itself, can be derived using the secret key. 

The permutated pattern may exist as a sequence in time, for example where the digital 
data work is an audio work. In addition, it may occur as a pattern of locations that are 
defined by their spatial relationships to one another. This may arise where the digital 
30 data work is an image [as in the examples given above]. The pattern may also exist as a 
combination of temporal and spatial sequences or patterns, for example where the 
digital data work is an audio-visual work, such as a television program or a film. 

The data elements may be the discrete or basic units of digital information and the 
35 characteristics may be the values of those units of digital information or statistical 
measures related to such values. For example, where the digital data work is an audio 
work, the measurable characteristic may be the values of the quantised amplitude levels 
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associated with each successive time period. If the digital data work is a digital image, 
then the data elements may be the pixels and the characteristics may be the pixel values, 
or statistical measures related to those values, as in the examples above. 

5 More generally, the step of modifying the data elements may only occur if the original 
and modified data elements differ by no more than a defined tolerance. This ensures 
that the manipulation of the digital data work does not alter the image beyond tolerance 
limits, hence ensuring that the manipulation is not readily discernible. Further, the 
extent of the modification can be adapted to the level of noise of the work: in noisy 
10 regions in a work, larger changes are necessary, whereas in smoother regions of a 
work, smaller changes are required. 

In a yet further aspect of the present invention, there is provided a method of reading a 
digital data work, made up of a number of data elements, comprising the steps of 
15 analysing the digital data work for a pre-determined pattern of constituent pans and 
determining if a measurable characteristic of data elements in a particular constituent 
part differs from that expected. 

In addition, in another aspect, there is provided apparatus for manipulating a digital data 
20 work to include additional data, operable to perform the methods described above. 



25 

Petaiigd Pgsoriptipn 

The detailed description that follows is in respect of an embodiment of the invention 
that relates to manipulating the digital data of a colour digital image. 

30 

The present embodiment is implemented in an apparatus, referred to as DIP (Digital 
Image Protection) which [1] alters digital images by selectively modifying the pixels in 
the image and [2] acts as a detector by scanning images for previously performed 
35 modifications. One purpose of DIP is to hide (Le. "fingerprint") text information in the 
image in such a way that the legal owner of the copyright in the image can prove his/her 
ownership of the image even after severe modifications of the image. 



WO 96/27259 



PCI7GB96/00491 



8 

Each time the user runs the program to place such hidden information within an image, 
a counter in DIP is incremented by one; when a pre-set number of runs have been 
made, no further runs are possible until the user has obtained a re-fresh. The counter 

5 may be incorporated within a "dongle", conventionally used to prevent copying of 
software programs and used also as an access control device. The re-fresh may be 
achieved by the user purchasing a new "dongle". Alternatively, the counter may be 
linked to an encryption program that enables further usage when a given code word is 
entered via a connected keyboard into the DIP apparatus. That code word is unique to 

10 that particular DIP and/or connected "dongle" and can be obtained by the user 
telephoning its DIP supplier, who will have recorded the various codes. In this way, 
the DIP supplier ensures continuing revenues on a usage basis. 

The permutation process is fundamental to one embodiment of the invention, namely 
15 the embodiment that enables messages to be coded into digital data works. A simple 
exemplification of the development of the permutation method now follows. The 
generalised version of this method, initially in a slightly simplified form, is then 
presented in mathematical notation. The conceptual basis for the permutation technique 
is detailed below. 

20 

A simple code sequence with no permutations 

Suppose a code is to be added to an original image which is 60 X 60 pixels in size and 
that code is in the form of six numbers a, b, c, d, e, f, all of which fall within the 
25 range -2 to +2. This code could be added to groups of six adjacent pixels, so that the 
code formed the sequence abcdefabcdefabcdef..... 

However, this sequence is so regular it might readily be seen by the human eye. Also, 
the code is so obvious it is readily detectable by a hacker. Nevertheless, continuing 
30 with this example for illustrative convenience, imagine that the original pixel values of 
the image are : 

34 49 38 41 77 70 68 63 ( up to the 60th column) 

( for all rows up to the 60th row) 

35 then the coded image will have the values: 



34+a 49+b 38+c 41+d 77+e 70+f 68+a 63+b (..up to the 60th column) 
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( for all rows up to the 60th row) 

We can then define a set of all those pixels that have had a added to them as the set A; 
and all those that have had b added to them as the set B, and similarly for sets C, D, E 
5 and F. 

Suppose the mean pixel value for the whole image before the coding is applied is 100. 
Because the numbers of elements in each of the sets A, B, C, D, E and F are large, 
the mean value of each set will be quite close to 100 also. For example, the mean values 
10 might be: 

100.3 99.6 100.1 100.2 99.9 99.8 respectively 

Suppose that we set the values for a, b, c, d, e, f as follows: 
2-11 1-2-1 
15 Then the mean values for each set are: 

102.3 98.6 101.1 101.2 97.9 98.8 
If we round the numbers to the nearest whole number, we obtain: 

102 99 101 102 98 99 
If we subtract 100 from each of these, we find the original code: 
20 2 -1 1 2 -2 -1 

This simple example illustrates how the coded message can be input and recovered. 
Statistical test can also be used to determine if a code is present. Statistical tests are 
always needed because the limits of possible deviations of the mean value of sets 
A,B»"» must be calculated in order to be sure that results are not caused by random 
25 fluctuations. 

PgrroytatiQn methods 

The code abedefabedefabedef..... is so regular it might readily be seen by the 
30 human eye. Also, the code is so obvious it is readily detectable by a hacker. The 
permutation technique effectively addresses both concerns. 

A permutation is simply a re -ordering of numbers. Using a standard notation, we can 
represent the straight forward order abedef with the code P0. We can permute this 
35 sequence so that the first element is shifted to the third, the second to the sixth, the third 
to the fifth, the fourth to the first, the fifth to the second and the sixth to the fourth. We 
can represent this with the simple notation 
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P = 1 2 3 4 5 6 
3 6 5 1 2 4 

5 so that Pl{a,b,c,d,e,f} = {d,e,a,f,c,b} 

We can now apply the same permutation to the new set, so that 

P2{a,b,c,d,e,f} = P{d,e,a,f,c,b}= P(P{a,b,c,d,e,f}) = {f,c,d,b,a,e} 

10 This yields the following six permutations: 

P0 = {a,b,c,d,e,f} 

PI = {d,e,a,f,c,b} 

P2 = {f,c,d,b,a,e} 

15 P3 = {b,a,f,e,d,c} 

P4 = {e,d,b,c,f,a} 

P5 = {c,f,e,a,b,d} 

P6 = {a,b,c,d,e,f} = PO 

20 In the first example above, the code was added in the simplest way possible, i.e. 
abcdefabcdefabcdef..... 

The permutation technique allows us to add the following sequence instead: 
abcdef deafcb fcdbae bafedc edbcfa cfeabd .... 

This sequence is both far less noticeable and also less corruptible. Since the detector 
25 knows the permutation to look for, it will be able to reconstruct the sets A, B, C, D, 
E, F. 

The commutative permutation technique is a versatile one and leads to images carrying 
the code being able to retain sufficient code information even after manipulations to the 

30 image such as cropping. For example, before the image has been cropped, suppose that 
the first pixel had the value a added to it. After cropping, we do not know which pan of 
the sequence starts at the first pixel. In the example given above, there are 6 sets of 6 
elements each, i.e. 36 elements in total. However, the detector does not have to try each 
of the 36 elements as possible start elements. In fact, it need look only at the first 6 

35 elements. In practice, there is an even greater saving, since instead of there being 6 sets 
of 6 elements each, there are typically 30 sets of 30 elements each. 
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Suppose that the image has been cropped so that the pattern added to it is as follows: 
fcb fcdbae bafedc edbcfa cfeadb abcdef deafcb fcdbae bafedc... 
The detector will not know that the image has been cropped and will therefore assume 
that the first 6 elements form the first set. It will see the above sequence as: 
5 fcbfcd baebaf edcedb cfacfe adbabc defdea fcbfcd baebaf edc... 

If the sequence fcbfcd was genuinely the first set, then the next set ought to be 
fcfdbc, since that is the first permutation of it. But in fact the next set is baebaf. 
Because of this mismatch, the detector knows that the sequence does not in fact start at 

10 fcbfcd, i.e. the detector knows that the image must have been cropped. If it then 
moves on to the next letter, the first c, the same problem arises. The same problem also 
arises with the next letter, b. However, on moving to the next element, the fourth, i.e. 
the second letter f, the predicted subsequent permutations in fact agree with those 
actually present in the image. Hence the detector can rapidly determine where the true 

15 stan of the sequence is by looking only at the first six elements, even though the image 
has been cropped. 

Because the same permutation is applied to convert each of the sets P0, PI, P2 t P3, 
P4, P5 into each of the others, the detector still does not know whether the set fcdbae 
20 is P2 or one of the other sets. This can however be solved by saying that the element a 
always has a particular value (2 in the example above) and that no other element has that 
value. Once the set fcdbae has been found, the unique value a will be found in the 
fifth location. This therefore shows that the set is P2. Having defined P2, all the other 
sets can be defined in the right order. 

25 

Applying thg PCTTTMaaQn a a rgal im 9 gf r 

To make the pattern more compact and also to go further in avoiding artefacts produced 
by the fingerprint, it is formed in rectangular rather than linear arrays. The permutations 
30 defined above will actually be imprinted as: 

abc baf abc baf abc baf.... 
def dec def dec def dec 

35 fed cfe fed cfe fed cfe...... 

bae abd bae abd bae abd.... 

edb dea edb dea edb dea... 
cfa fcb cfa fcb cfa fcb.... 

40 
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abc baf abc baf abc baf ... 
def dec def dec def dec ... 

This can be represented as follows: 

5 

PO P3 PO P3 PO P3 
P2 P5 P2 P5 PO P5 
P4 PI P4 PI P4 PI 
PO P3 PO P3 PO P3 
10 P2 P5 P2 PS PO PS 
P4 PI P4 PI P4 PI 

The detection operates as described above, with for example, the same process being 
applied to detect cropping. It should be noted that as readily available computing 
15 power increases, the detector can use more sophisticated means of detection and can 
thus cope with greater levels of image degradation and more elaborate transformations 
in a reasonable time. 

In the example above, a code with only 6 elements was discussed. Suppose we need to 
20 deal with a code with many more elements. We would like to arrange them in the 
rectangular array described above and avoid too much regularity. We are therefore 
interested in any number n which is a product of a pair of co-primes, r and s (in the 
example above, n is 6, the product of the co-prime pair 2 and 3). The number of 
permutations is very large so that it is difficult to extract the message without a 
25 knowledge of the key and the extraction method. 

Generalisation of the Permutation Method 

The generalisation of the above example will now be described, initially in a slighdy 
30 simplified form. This generalisation describes a linear permutation scheme in which 
there are offsets applied to each image line. Some of the general concepts put forwaid 
above are repeated, but in a slightly different (and in pans more mathematical) manner. 

In this example, the pattern which DIP imposes upon such an image may be regarded 
35 as a template covering a set of pixels; the template is repeatedly placed upon the image. 
Any chosen element of the template will appear in many positions on the image. 
Corresponding to any element of the template is a set of pixels, each corresponding to 
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an element of the template. If the shape and size of the template are appropriately 
chosen then the sets into which the image is divided will be tightly interlaced. This will 
mean that the average values of pixels in one set should not differ substantially from the 
average values in another set If, however, a value is added to every member of one of 
5 these sets then the average value will show a marked deviation from that of any other 
set. This difference constitutes a recoverable piece of information. 

In more mathematical terms, the average values of the sets of values into which the 
image is sub-divided will have a known statistical distribution. The parameters of this 
10 distribution can easily be calculated in advance. This enables any exceptional values 
such as those arising from imposition of a regular pattern to be detected. It is also 
possible to calculate the relationship between the number of elements in a pattern, the 
magnitude of the imposed alteration in data, the size of the image and the detectability of 
a pattern. Thus the type of pattern appropriate for any given situation can be selected. 

15 

As in the previous examples, the imposed pattern provides a means of storing a 
message of some son in an image. The length of that message is restricted by the 
consideration above, namely the need not to subdivide the image into sets of too small a 
size. However, too short a repeated pattern would ease the problem of detection for 
20 someone who did not have the encryption key used in the original marking process (see 
below). For this reason, the pattern is again permutated throughout the image according 
to a rule derived from the encryption key. 

In one embodiment, the user selects an alphanumeric encryption key K{ki, 

25 k2 k n } and message M{mi, m2 m p }. The number, p, of terms in the 

message is governed by the minimum size of an image in which the fingerprint may be 
detected 

Encryption process E converts K into a set of q-1 permutations P{pi, p2 Pq- 

30 1} and a set of integer offsets 0[offi, off2, off s } t and also converts M into 

a set of integers N{ni, n2.......n r }, some positive and some negative. 

A set of q permutations of N are then generated according to the scheme: - 

35 Ni = P l (N) 

N2 = P2 (Ni) 
N3 = P3 (N 2 ) 
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I.e.: Nq.l = pq-1 (N( q .2)) 

N, Ni, N2t Nq-l are then concatenated to produce a single extended set 

5 EN{eni, en2, *nq r }. 

The values in EN are then added in succession to the values describing the pixels along 
a line of the image. The same values are then added to the succeeding line with an offset 
chosen successively from the set O. 

10 

Schematically, this can be represented as: 

for(row = 0; row < imageheight; row ++) 

{ * 

15 rowoffset = off ( row % s ) (a % b = remainder when a is 

divided by b) 

for (pixel = 0; pixel < imagewidth ; pixel ++) 

{ 

pixel_offset = (rowjjffset + pixel) % qr; 
20 pattern_value = en( p i xe | % qr); 

pixel_value = pixel value + pattern value; 

} 

} 

25 The fingerprint thus exists throughout the image! and hence operations such as 
cropping, rotating and scaling will not affect its presence. The addition of patterns, 
excepting those of identical frequencies, will not disguise the fingerprint. Knowledge 
of the required destructive frequencies requires knowledge of the encryption process E. 

30 The method DIP uses to detect the presence of fingerprints will now be described. 

Detection requires knowledge of the encryption key K. As above, the set of 
permutations P and offsets O are generated from this key K. The detector then 

calculates a set of equivalent pixels for the image as follows: The set S{ 1,2,3 p} 

is permuted according to the scheme:- 

35 

51 = pi (S) 

52 = P2 (Si) 
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S3 = P3 (S2) 

i.e.: Sq.l = p q -l (S( q -2)) 

5 S, Si, S2> Sq-l are then concatenated to produce a single extended set 

ES{esi, es2, es n q}, where each of the elements es is an integer in the 

range 1 to p. 

This set of values is attached one to each pixel across a line of the image. The detector 
10 takes the first line of the image and ascribes each pixel value to one of p equivalent sets 

Q (qii Q2» q3 Qp} as indicated below. The total value, T q> of the pixels in 

each set is then found. 

Schematically:- 
15 for(row = 0; row < imageheight; row ++) 
{ 

row_offset s off (row % s) 

for (pixel = 0; pixel < imagewidth ; pixel ++) 

{ 

20 pixel_offset = (row offset + pixel) % qr; 

equiv_$et = es p ixe!_offest; 
Tequiv_set = T C quiv_set + pixelvalue; 

> 

} 

25 

This summation produces a set of p totals Tq. By applying a Chi squared test it can be 
determined whether or not these totals could have arisen from data which had not been 
modified according to the selected form of encryption. This test may thus confirm the 
existence of a message coded by the use of key K. If the message is thus found to exist 
30 it may be deciphered as follows. The mean value T mean of the set of total Tq is 
found The standard deviation of the totals is calculated from knowledge of the standard 
deviation of the original data and the number of pixel values in the image. From this an 
upper limit U and lower limit L of expected values of Tq are calculated. Only if a 
pattern has been imposed on the image will values of T q lie outside the range (L,U). 

35 

The message is deciphered in binary form using the rule for each total in turn:- 
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for(index = 0; index < p;index++) 

{ 

if(T index > U) 
{ 

5 "Mndex = +1; 

} 

else 

{ 

"(Tindex < L) 
10 { 

niindex = -1; 

} 

else 

{ m index is not defined 

15 } 
} 

} 

If all values of m are defined then the message is valid; 

20 

transformations of an image mean that the above method must be applied with different 
orientations, starting locations and scaling factors. However, the nature of the method 
will remain substantially unchanged. 

25 To render the above scheme equivalent to the original simple example, and for the 

reasons elucidated in that example, each of the permuted sets N 1 , N 2 , is 

arranged in a rectangle rather than in linear fashion. These rectangles arc then arranged 
in a fashion analagous to that described in the example. 



30 



One of the problems of precisely defined patterns being imposed on an image is that 
resizing or rotation of the image renders the detection very difficult and in general 
35 requires that repeated searches with different values of three parameters be performed. 
To overcome this problem, the image can be printed with orientation markers. These 
markers are in the form of stripes at a chosen angle. To avoid being clearly visible the 
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stripes are not solid. Instead, pixels forming part of the stripes are turned on randomly. 
This leads to the stripe image not being trivially removable. 

The method of detection of the stripes is to search the image for regularly occurring 
5 frequencies which correspond to the width of the stripes. The image is then rotated 
through small amounts and in each position the presence of a dominating frequency is 
sought. The angle at which such a frequency occurs indicates the angle of rotation, the 
value of the frequency indicates the scaling of the image if the frequency of the original 
is known. 

10 

Alternatively, dominating frequencies may be sought in two orthogonal directions and 
the same information derived together with information about any anamorphism. The 
frequency can be sought by the usual method of correlating the image with a function of 
known frequency, or by correlating two or more separate pans of the image. 
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Claims 

5 

1 . A method of manipulating a digital data work, made up of a number of data 
elements, to include additional data descriptive of that digital data work, comprising the 
steps of:- 

dividing the whole or pan of the work into a pattern of constituent pans, each 
10 constituent pan consisting of a set of data elements and each set of data elements having 
a measurable characteristic; 

selecting a particular constituent pan; 

modifying some or all of the set of data elements of that panicular constituent 
pan according to a given set of rules such that the measurable characteristic of that set 
15 is different from the measurable characteristic of the corresponding unmodified set of 
data elements, or other sets in other constituent parts, 

wherein the difference is detectable, even after the work has undergone 
alterations which are of at least one kind of the alterations ordinarily applied to such 
works, if the pattern of the constituent pans and the nature of the measurable 
20 characteristic are known, but is not otherwise readily detectable; 

and wherein the modification codes for the additional data descriptive of that 
digital data work. 

25 2. The method of Claim 1 wherein the actual data content of the manipulated sets 
of data elements codes for the additional data. 

3 . The method of Claim 1 or 2 comprising the further steps of: 
[1] generating a secret key; 
30 [2] generating a permutation using that secret key; 

[3] generating a binary number sequence representing the additional data 
descriptive of that data work to be hidden into the data work: 
[4] applying the permutation to the binary number sequence to generate a 
permutated pattern; 

35 [5] imposing the permutated pattern repeatedly over the entire original data 

work. 
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4. The method of claim 3 wherein the permutated pattern is imposed as a linear array. 

5. The method of claim 3 wherein the permutated pattern is imposed as a rectangular 
array. 

5 

6. The method of claim 4 o 5 wherein the additional data descriptive of that digital data 
work is consists of two messages, one associated with a first permutation, the second 
associated with a second permutation, the permutations being orthogonal. 

10 7. The method of any preceding claim comprising the further step of imposing 
orientation markers upon the work. 

8. The method of any preceding claim wherein the extent of the modifications at any 
particular region of the work depends upon the noise level in that region. 

15 

9 . An apparatus adapted to manipulate a digital data work to include additional data 
descriptive of that digital data work* the work being made up of a number of data 
elements, and being divided into a pattern of constituent pans, each constituent pan 

20 consisting of a set of data elements and each set of data elements having a measurable 
characteristic; consisting of: 

[1] a data store for storing data representing the measurable characteristics; 
[2] a processor adapted to modify some or all of the stored data in the data store 
representing the set of data elements of that particular constituent pan according to a 
25 given set of rules such that the measurable characteristic of that set is different from the 
measurable characteristic of the corresponding unmodified set of data elements, or other 
sets in other constituent pans; 

wherein the difference is detectable, even after the work has undergone 
alterations which are of at least one kind of the alterations ordinarily applied to such 
30 works, if the pattern of the constituent pans is known and the nature of the measurable 
characteristic is known, but is not otherwise readily detectable, and the modification 
codes for the additional data descriptive of that digital data work. 
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